Vulnerability · Published Jun 16, 2026 · Assigned by Rockwell
CVE-2026-11317Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP
High 8.7
In plain English
A high-severity security flaw in CompactLogix, ControlLogix from Rockwell Automation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.3%top 77.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial of service security issue exists in the affected product. The security issue stems from a fault occurring when a crafted CIP message is sent. Devices with less memory are more likely to be affected. This can result in a major nonrecoverable fault (MNRF). A program download is required to recover.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Rockwell Automation | CompactLogix, ControlLogix | Versions prior to 34.016Versions prior to 35.015Versions prior to 36.012 |
Weakness: CWE-404 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N